The new version of VMan (6.0) released on Tuesday the 13th of August allows you to block HTTP access to web console. To do so you should log in to admin web console (accessable at https://VMAN_ADDRESS:5480/ and under SolarWinds Mgmt tab click "Block HTTP access". This will provide the necessary changes to iptables Milan talked about.